CVE-2020-23150

A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to…

published August 9, 2021

CVSS
—
EPSS
2%
Percentile
75.0
In the wild
Unconfirmed
What it is

A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to install/lib/ajaxHandlers/ajaxDbInstall.php.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01558 · 75.0th percentile
Published
2021-08-09T22:54Z
EPSS history
Timeline
  • 09 AUG 22:54Z
    A SQL injection vulnerability in config.inc.php of rConfig 3.9.5 allows attackers to access sensitive database information via a crafted GET request to…
    cvelistv5